X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=plc_config.xml;h=689b75b5eaa3429e25867b6a345207f886d07670;hb=c789793e142f9a5bc181c36e0b9241b5e219e74c;hp=7c85cf3a9d9f53184eb3fbf88754719a6b6ca164;hpb=2b5a03e21b801468b9e509d49626b97e7798922e;p=myplc.git diff --git a/plc_config.xml b/plc_config.xml index 7c85cf3..689b75b 100644 --- a/plc_config.xml +++ b/plc_config.xml @@ -1,5 +1,15 @@ - - + + + + + @@ -25,12 +35,12 @@ The abbreviated name of this PLC installation. It is used as the prefix for system slices (e.g., pl_conf). Warning: Currently, this variable should - not be changed once set. + not be changed. - + Root Account - root@test.planet-lab.org + root@localhost.localdomain The name of the initial administrative account. We recommend that this account be used only to create additional accounts associated with real @@ -101,18 +111,41 @@ Primary DNS Server - 128.112.136.10 + 127.0.0.1 Primary DNS server address. Secondary DNS Server - 128.112.136.12 + Secondary DNS server address. + + DNS + MyPLC can provide forward DNS resolution for itself + and for its nodes. To enable resolution for MyPLC itself, set + the Primary DNS Server address to 127.0.0.1 and provide external + IP addresses for the database, API, web, and boot servers + below. To enable resolution for nodes, use the external IP + address of this machine as the primary DNS server address for + each node. + + + + Enable DNS + true + Enable the internal DNS server. The server does + not provide reverse resolution and is not a production + quality or scalable DNS solution. Use the internal DNS + server only for small deployments or for + testing. + + + + Mail Many maintenance scripts, as well as the API and @@ -127,9 +160,9 @@ and warnings. - + Support Address - root@localhost + root+support@localhost.localdomain This address is used for support requests. Support requests may include traffic complaints, security incident reporting, web site malfunctions, and @@ -138,13 +171,19 @@ Tracker. - + Boot Messages Address - root@localhost + root+install-msgs@localhost.localdomain The API will notify this address when a problem - occurs during node installation or boot. If a domain is not - specified, the default system domain will be used - name. + occurs during node installation or boot. + + + + Slice Address + root+SLICE@localhost.localdomain + This address template is used for sending + e-mail notifications to slices. SLICE will be replaced with + the name of the slice. @@ -170,15 +209,28 @@ Hostname - localhost - The fully qualified hostname or IP address of - the database server. This hostname must be resolvable and - reachable by the rest of your installation. + localhost.localdomain + The fully qualified hostname of the database + server. + + + + IP Address + 127.0.0.1 + The IP address of the database server, if not + resolvable by the configured DNS servers. + + + + Port + 5432 + The TCP port number through which the database + server should be accessed. Database Name - planetlab3 + planetlab4 The name of the database to access. @@ -220,22 +272,23 @@ Hostname - localhost - The fully qualified hostname or IP address of - the API server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the API + server. - + + IP Address + 127.0.0.1 + The IP address of the API server, if not + resolvable by the configured DNS servers. + + + Port - 80 + 443 The TCP port number through which the API - should be accessed. Warning: SSL (port 443) access is not - fully supported by the website code yet. We recommend that - port 80 be used for now and that the API server either run - on the same machine as the web server, or that they both be - on a secure wired network. + should be accessed. @@ -246,7 +299,7 @@ Maintenance User - maint@test.planet-lab.org + maint@localhost.localdomain The username of the maintenance account. This account is used by local scripts that perform automated tasks, and cannot be used for normal logins. @@ -264,9 +317,10 @@ Authorized Hosts A space-separated list of IP addresses allowed - to access the API through the maintenance account. If left - blank, the API, web, and boot servers are - allowed. + to access the API through the maintenance account. The value + of this variable is set automatically to allow only the API, + web, and boot servers, and should not be + changed. - - SSL Certificate - /etc/planetlab/api_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified or non-existent, a self-signed - certificate will be generated. - - - SSL Key + SSL Private Key /etc/planetlab/api_ssl.key - The corresponding SSL private key. If not - specified or non-existent, a self-signed certificate will be + The SSL private key to use for encrypting HTTPS + traffic. If non-existent, one will be generated. - - Slice Ticket Private Key - /etc/planetlab/slice-ticket-key-nopass.pem - The private PEM key file used to sign slice - tickets. + + SSL Public Certificate + /etc/planetlab/api_ssl.crt + The corresponding SSL public certificate. By + default, this certificate is self-signed. You may replace + the certificate later with one signed by a root + CA. - - Slice Ticket Public Key - /etc/planetlab/slice-ticket-key-public.pem - The public PEM key file used to verify signed - slice tickets. + + Root CA SSL Public Certificate + /etc/planetlab/api_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -327,13 +377,18 @@ Hostname - localhost - The fully qualified hostname or IP address of - the web server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the web + server. + + IP Address + 127.0.0.1 + The IP address of the web server, if not + resolvable by the configured DNS servers. + + Port 80 @@ -354,20 +409,30 @@ be downloaded, or its contents replaced by a file upload, but the actual shouldn't need to be changed. --> + + SSL Private Key + /etc/planetlab/www_ssl.key + The SSL private key to use for encrypting HTTPS + traffic. If non-existent, one will be + generated. + + - SSL Certificate + SSL Public Certificate /etc/planetlab/www_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified or non-existent, a self-signed - certificate will be generated. + The corresponding SSL public certificate for + the HTTP server. By default, this certificate is + self-signed. You may replace the certificate later with one + signed by a root CA. - - SSL Key - /etc/planetlab/www_ssl.key - The corresponding SSL private key. If not - specified or non-existent, a self-signed certificate will be - generated. + + Root CA SSL Public Certificate + /etc/planetlab/www_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -390,13 +455,18 @@ Hostname - localhost - The fully qualified hostname or IP address of - the boot server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the boot + server. + + IP Address + 127.0.0.1 + The IP address of the boot server, if not + resolvable by the configured DNS servers. + + Port 80 @@ -418,20 +488,29 @@ be downloaded, or its contents replaced by a file upload, but the actual shouldn't need to be changed. --> - - SSL Certificate + + SSL Private Key + /etc/planetlab/boot_ssl.key + The SSL private key to use for encrypting HTTPS + traffic. + + + + SSL Public Certificate /etc/planetlab/boot_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified, or non-existent a self-signed - certificate will be generated. + The corresponding SSL public certificate for + the HTTP server. By default, this certificate is + self-signed. You may replace the certificate later with one + signed by a root CA. - - SSL Key - /etc/planetlab/boot_ssl.key - The corresponding SSL private key. If not - specified or non-existent, a self-signed certificate will be - generated. + + Root CA SSL Public Certificate + /etc/planetlab/boot_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -445,10 +524,21 @@ PlanetLab Central Packages true + + dev + + + kernel-vserver + sendmail sendmail-cf + + dnsmasq + rsync @@ -459,19 +549,27 @@ cvs curl wget + less + gzip + bzip2 + cpio + tar + diffutils createrepo + yum + rpm expect + + openssh + python - - plcapilib - postgresql postgresql-server @@ -485,7 +583,8 @@ access the DB directly. --> php php-pgsql - php-xmlrpc + + gd @@ -495,6 +594,7 @@ mod_python + PLCAPI PyXML @@ -502,14 +602,9 @@ xmlsec1-openssl openssl - - mkisofs - - - gnupg - - - sharutils + + bootcd + bootmanager